Exam SY0-601 topic 1 question 242 discussion

"The cloud provider and the organization must have security controls to protect sensitive data." If you want to have some part of administrative controll, you have to go with PaaS. SaaS is not enaugh in this case.

"SaaS allows people to use cloud-based web applications. In fact, email services such as Gmail and Hotmail are examples of cloud-based SaaS services."

answer is 100% B. If you look up 'shared responsibility demarcation' youll see with PaaS you have more responsibility therefore more control which is what the question is asking. Responsibility and control goes as follows Iaas > Paas > Saas

The cloud service that would BEST accommodate the request to move email services to the cloud while also providing security controls to protect sensitive data is: D. SaaS (Software as a Service). SaaS offers ready-to-use software applications hosted and managed by a third-party cloud provider. In this case, moving email services to a SaaS model means subscribing to an email service hosted and managed by a cloud provider. The cloud provider is responsible for maintaining the underlying infrastructure, ensuring security controls are in place, and managing the email service's availability and performance. This approach allows the organization to reduce infrastructure costs, benefit from the cloud provider's security expertise, and focus on using the email service without having to worry about managing the underlying infrastructure.

SaaS Software as a Service. This will reduce and limit infrastructure costs as email will be hosted on the Cloud via SaaS reducing the need for their mail server etc. Gmail, M365, etc = SaaS.

Has anyone considered DaaS

The question was. To reduce and limit software and infrastructure costs, This would be PaaS. However, the CIO has only requested to move the email services to the cloud this would be SaaS.

D. SaaS Exchange online through Microsoft 365 is considered to be software as a service.

PaaS is all for coding and testing as far as CompTIA is concerned. D - SAAS Think of Gmail, MS Exchange, Sharepoint etc.

"...the Chief Information Officer has requested to move email services to the cloud..." Microsoft Outlook comes to mind...software as a service

Answer is D SaaS. Becuase PaaS provides more flexibility but also involves more responsibility for managing and securing the application. So more responsibility for managing means is more cost. Question ask to limit the cost.

considering both the organization's and the cloud provider's shared responsibility for security, SaaS (Software as a Service) would likely be the most suitable option for moving email services to the cloud. In a SaaS model, the cloud provider takes on more of the responsibility for infrastructure and security, including protecting the underlying platform and application. The organization's responsibility primarily lies in securing user access and usage of the application, which aligns well with email services. With SaaS, the organization can still configure and manage user access and policies, ensuring the security of sensitive data within the email service while benefiting from the cloud provider's security measures for the underlying infrastructure.

SaaS is a cloud computing model where the cloud provider hosts and manages applications that are accessed by users over the internet. In the case of email services, using a SaaS solution means that the organization can leverage a cloud-based email service provider that takes care of the infrastructure, maintenance, and security of the email service. This allows the organization to reduce and limit software and infrastructure costs while ensuring that sensitive data is protected by the security controls implemented by the SaaS provider.

I'm going to throw my hat in the ring with PaaS. With SaaS, the user typically has little to no controls over the security of the platform.

SaaS vendors are primarily responsible for the security of their platform, including physical, infrastructure and application security. These vendors do not own the customer data or assume responsibility for how customers use the applications.

would go with PaaS. there is a reason why 'The cloud provider and the organization must have security controls to protect sensitive data.' is there no? if the customer and the CSP have to set up security controls, it is PaaS I believe. In SaaS, the customer would not need to do anything.

SaaS (Software as a Service) is the best option to accommodate the request for moving email services to the cloud while reducing and limiting software and infrastructure costs. With SaaS, the organization can subscribe to a cloud-based email service provided by the cloud vendor. The cloud vendor is responsible for managing the underlying infrastructure, software, and security controls needed to protect the sensitive data. This allows the organization to offload the maintenance and security responsibilities to the cloud provider, reducing the operational burden on the organization's IT team and ensuring that security controls are implemented by the cloud provider to protect the data.